SASL_NOCANON on
URI ldaps://{{ ipa_server }}
BASE {% if env == "staging" %}dc=stg,{% endif %}dc=fedoraproject,dc=org
TLS_CACERT /etc/ipa/ca.crt
SASL_MECH GSSAPI
